A script based on sqlmap that uses sql injection vulnerabilities to traverse the existence of a file

Last update: Nov 09, 2022

Overview

TraverseFilesBySQLInjection

基于sqlmap的利用sql注入漏洞遍历文件是否存在的脚本
A script based on sqlmap that uses sql injection vulnerabilities to traverse the existence of a file

usage

需要注意，在盲注时如果开启多线程会导致不稳定
It should be noted that if multi-threading is enabled during blind injection, it will cause instability

usage: test2.py [-h] [-u URL | -r HEADERS_DATA] [-w FILE] [-t THREADS]

By zongdeiqianxing; Email: [email protected]

optional arguments:
  -h, --help       show this help message and exit
  -u URL
  -r HEADERS_DATA  HTTP request header
  -w FILE          wordlist containing file path
  -t THREADS       threads count

show

$ python3 TraverseFilesBySQLInjection.py -r 1.txt -w linux.txt 
2021-10-23 23:01:51,211 - __main__ - INFO - The program has been started, if found readable files, it will be displayed, please wait..
2021-10-23 23:02:21,234 - __main__ - INFO - /etc/hosts file exists
2021-10-23 23:02:41,058 - __main__ - INFO - /etc/hostname file exists
2021-10-23 23:03:00,863 - __main__ - INFO - /etc/passwd file exists

A script based on sqlmap that uses sql injection vulnerabilities to traverse the existence of a file

Related tags

Overview

TraverseFilesBySQLInjection

usage

show

Owner

Midas ELF64 Injector is a tool that will help you inject a C program from source code into an ELF64 binary.

macOS persistence tool

A Python script that can be used to check if a SAP system is affected by CVE-2022-22536

NIVOS is a hacking tool that allows you to scan deeply , crack wifi, see people on your network

Python HDFS client

Northwave Log4j CVE-2021-44228 checker

Tools for investigating Log4j CVE-2021-44228

Script for automatic dump and brute-force passwords using Volatility Framework

Apache Flink 目录遍历漏洞批量检测 (CVE-2020-17519)

SeaSurf is a Flask extension for preventing cross-site request forgery (CSRF).

Log4j2 intranet scan

MainCoon - an automated recon framework

Just your basic port scanner - with multiprocessing capabilities & further nmap enumeration.

将hw时信息收集以及简单的漏洞操作步骤简单化

Port scanning tool that uses Python3. Created by Noble Wilson

A windows post exploitation tool that contains a lot of features for information gathering and more.

SARA - Simple Android Ransomware Attack

Consolidating and extending hosts files from several well-curated sources. You can optionally pick extensions to block pornography, social media, and other categories.

Strapi Framework Vulnerable to Remote Code Execution

Discord exploit allowing you to be unbannable.